e047801f871cbd8902b2ac1321831247_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
e047801f871cbd8902b2ac1321831247_JaffaCakes118
Size 1.2MB
Sample240914-qq2mgawdmp
SHA256 1641f5853be8c03ca15051c347509e5023104e7b2b2889ec27a395520f113806
MD5 e047801f871cbd8902b2ac1321831247
SHA1 7c2953f5ba448b3e2e6a26dd61451c2ab182eceb
SHA512 312b3014a63269f81ac51f29e79ce777ab70fe004f838b5f4eba3a138dd8646aea1a15ed46fee1abd028f9ab70d63e3f18aff1097c710e2c17076c612839ec37
SSDEEP 24576:dbkiGUv38BEDWRR2cU1kPLtOF5Tr287ZTPcyAKYP+y42Cn:yqvCEaRkca2Yb/3PmKxqi
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

e047801f871cbd8902b2ac1321831247_JaffaCakes118

.exe 1.2MB

e047801f871cbd8902b2ac1321831247_JaffaCakes118

IMPHASH ec03c10856332f2297c1909f0a8caf6a
SHA256 1641f5853be8c03ca15051c347509e5023104e7b2b2889ec27a395520f113806
MD5 e047801f871cbd8902b2ac1321831247
SHA1 7c2953f5ba448b3e2e6a26dd61451c2ab182eceb
SHA512 312b3014a63269f81ac51f29e79ce777ab70fe004f838b5f4eba3a138dd8646aea1a15ed46fee1abd028f9ab70d63e3f18aff1097c710e2c17076c612839ec37
SSDEEP 24576:dbkiGUv38BEDWRR2cU1kPLtOF5Tr287ZTPcyAKYP+y42Cn:yqvCEaRkca2Yb/3PmKxqi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

5e:bc:30:6e:e6:e5:ab:c2:da:ab:65:76:bc:be:d7:48:d5:28:bb:3f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Digital Plugin S.l.,O=Digital Plugin S.l.,L=Guia de Isora,ST=Santa Cruz de Tenerife,C=ES

Chains

Sep 7, 2024

Minor OS version

Major OS version

Entry point

38831

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress VirtualAlloc VirtualAllocEx VirtualFreeEx TerminateProcess GetLastError ReadProcessMemory WriteProcessMemory GetThreadContext ResumeThread LoadResource FreeLibrary LoadLibraryW GetModuleFileNameA GetModuleFileNameW GetModuleHandleW CreateProcessA FindResourceW FindResourceExW MultiByteToWideChar WideCharToMultiByte FreeConsole LockResource InterlockedDecrement SizeofResource InitializeCriticalSectionAndSpinCount LocalFree HeapDestroy CloseHandle CreateFileW FlushFileBuffers WriteConsoleW SetStdHandle GetStringTypeW SetFilePointerEx GetConsoleMode EncodePointer DecodePointer RaiseException RtlUnwind HeapFree HeapAlloc GetCommandLineW GetStdHandle WriteFile IsProcessorFeaturePresent ExitProcess GetModuleHandleExW HeapSize Sleep IsDebuggerPresent SetLastError InterlockedIncrement GetCurrentThreadId GetProcessHeap HeapReAlloc GetFileType DeleteCriticalSection GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree OutputDebugStringW LoadLibraryExW LCMapStringW EnterCriticalSection LeaveCriticalSection IsValidCodePage GetACP GetOEMCP GetCPInfo GetConsoleCP

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

ole32

CoInitializeEx CoSetProxyBlanket CoCreateInstance CoInitializeSecurity CoUninitialize

oleaut32

SysAllocStringByteLen SysStringByteLen SysFreeString VariantClear

shlwapi

PathFindFileNameW

Sharing

General

Malware Config

Signatures

File Explorer

e047801f871cbd8902b2ac1321831247_JaffaCakes118

PE Signature issue

kernel32

advapi32

ole32

oleaut32

shlwapi

generic